An attack-immune trusted architecture for supervisory aircraft hardware  

作　　者：Dongxu CHENG Chi ZHANG Jianwei LIU Dawei LI Zhenyu GUAN Wei ZHAO Mai XU 

机构地区：[1]School of Cyber Science and Technology,Beihang University,Beijing 100191,China [2]Beijing Electro-Mechanical Engineering Institute,Beijing 100074,China

出　　处：《Chinese Journal of Aeronautics》2021年第11期169-181,共13页中国航空学报（英文版）

基　　金：supported by the National Key Research and Development Program of China(No.2017YFB0802502);by the Aeronautical Science Foundation(No.2017ZC51038);by the National Natural Science Foundation of China(Nos.62002006,61702028,61672083,61370190,61772538,61532021,61472429,and 61402029);by the Foundation of Science and Technology on Information Assurance Laboratory(No.1421120305162112006);by the National Cryptography Development Fund(No.MMJJ20170106);by the Defense Industrial Technology Development Program(No.JCKY2016204A102);by the Liaoning Collaboration Innovation Center For CSLE,China。

摘　　要：With the wide application of electronic hardware in aircraft such as air-to-ground communication,satellite communication,positioning system and so on,aircraft hardware is facing great secure pressure.Focusing on the secure problem of aircraft hardware,this paper proposes a supervisory control architecture based on secure System-on-a-Chip(So C)system.The proposed architecture is attack-immune and trustworthy,which can support trusted escrow application and Dynamic Integrity Measurement(DIM)without interference.This architecture is characterized by a Trusted Monitoring System(TMS)hardware isolated from the Main Processor System(MPS),a secure access channel from TMS to the running memory of the MPS,and the channel is unidirectional.Based on this architecture,the DIM program running on TMS is used to measure and call the Lightweight Measurement Agent(LMA)program running on MPS.By this method,the Operating System(OS)kernel,key software and data of the MPS can be dynamically measured without disturbance,which makes it difficult for adversaries to attack through software.Besides,this architecture has been fully verified on FPGA prototype system.Compared with the existing systems,our architecture achieves higher security and is more efficient on DIM,which can fully supervise the running of application and aircraft hardware OS.

关 键 词：Aircraft hardware Dynamic integrity measurement Supervisory control System-on-a-Chip(SoC) Trusted computing 

分 类 号：V243.1[航空宇航科学与技术—飞行器设计]